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(54) Title: A DIGITAL INFORMATION LIBRARY AND DELIVERY SYSTEM 
(57) Abstract 



A computer network based digital information library system 
employing authentication and encryption protocols for the secure transfer 
of digital information library programs to a client computer system 
(214) and a mobile digital information playback device (212) removably 
connectable to the client computer system. Hie present invention is 
a computer network based library and information delivery system for 
accessing and obtaining selected digital information files. The library 
and information delivery system comprises: I) a library server (260) 
having a plurality of digital information files; 2) a client computer system 
(2 1 4) coupled to the library server (260) over a network (240); and 3) a 
mobile device (212) removably connectable to the client computer system 
(214). the client computer system (214) including logic for requesting a 
download of a selected one or more of the digital information files from 
the library server*(260), the client computer system (21 4) further including 
logic for downloading the selected one or more of the digital information 
files to the mobile device (212). 
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A DIGITAL INFORMATION LIBRARY 



AND DELIVERY SYSTEM 



FIELD OF THE INVENTION 



The present invention relates generally to a digital information transmission, receiving, 
and playback system. Specifically, the present invention pertains to a computer network based 
digital information library providing interactive client computer access. 



Recent technological advances in the compression of digital data and the expansion of 
storage capacities of computer systems together with the increased bandwidth of computer 
network infrastructures have created new possibilities for personalized access to and usage of 
large amounts of digital information. One form of this type of digital information is audio 
information delivered across a computer network as digitized information. 

In the field of interactive digital information transmission, receiving, and playback 
systems, several patents are known to the present applicants. U.S. Patent No. 5,132,992, issued 
July 21, 1992 to Yurt et al. (Yurt), describes a system of distributing video and/or audio 
information employing digital signal processing to achieve high rates of data compression. The 
Yurt patent describes a transmission system including a conversion means for placing the items 
from a source material library into a predetermined format as formatted data. Audio data is 
compressed by an audio compressor by application of an adaptive differential pulse code 
modulation (ADPCM) process to the audio data. Stored items are accessed in the compressed data 
library through the use of a unique address code assigned to each item during storage encoding. 
The unique address code is used for requesting and accessing information and items throughout 
the Yurt transmission and receiving process. The Yurt transmission system includes means by 
which a user enters a customer identifier (ID) code by which the system accesses the users 
account, and indicates to the system that the user is a subscriber of the system. If a subscriber is 
in good standing, the Yurt system delivers selected tides using the described techniques. 

One significant problem with the audio transmission and receiving system described in 
Yurt is the lack of an effective means for ensuring the security of the digital information library 
and of the items downloaded to a user from the digital information library. Although Yurt 
describes the use of a unique identification code assigned to items in the library and a customer ID 
code assigned to particular users, no authentication protocols or encryption techniques are 
described to prevent the unauthorized creation of clone libraries or the unauthorized download or 
copying of library items. Secondly, Yurt and related prior art does not describe an authentication 
or encryption means providing secure transactions between a server based digital information 
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SUMMARY OF THE INVENTION 



The preferred embodiment of the present invention is a computer network based digital 
information library system employing authentication, targeting, and encryption protocols for the 
secure transfer of digital information library programs to a client computer system and a mobile 
digital information playback device removably connectable to the client computer system. The 
present invention is a computer network based library and information delivery system for 
accessing and obtaining selected digital information files. The library and information delivery 
system comprises: 1) a library server having a plurality of digital information files; 2) a client 
computer system coupled to the library server over a network; and 3) a mobile device removably 
connectable to the client computer system, the client computer system including logic for 
requesting a download of a selected one or more of the digital information files from the library 
server, the client computer system further including logic for downloading the selected one or 
more of the digital information files to the mobile device. 
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DETAILED DESCRIPTION OF 
THE PREFERRED EMBODIMENT 



The preferred embodiment of the present invention is a computer network based digital 
information library system employing authentication, targeting, and encryption protocols for the 
secure transfer of digital information library programs to a client computer system and a mobile 
digital information playback device removably connectable to the client computer system. In the 
following detailed description, numerous specific details are set forth in order to provide a 
thorough understanding of the present invention. However, it will be apparent to one of ordinary 
skill in the art that these specific details need not be used to practice the present invention. In other 
instances, well known structures, interfaces, and processes have not been shown in detail in order 
not to unnecessarily obscure the present invention. 

Figure 1 illustrates a typical data processing system upon which one embodiment of the 
present invention is implemented. It will be apparent to those of ordinary skill in the art, however 
that other alternative systems of various system architectures may also be used. The data 
processing system illustrated in Figure 1 includes a bus or other internal communication means 
101 for communicating information, and a processor 102 coupled to the bus 101 for processing 
information. The system further comprises a random access memory (RAM) or other volatile 
storage device 104 (referred to as main memory), coupled to bus 101 for storing information and 
instructions to be executed by processor 102. Main memory 104 also may be used for storing 
temporary variables or other intermediate information during execution of instructions by 
processor 102. The system also comprises a read only memory (ROM) and/or static storage 
device 106 coupled to bus 101 for storing static information and instructions for processor 102, 
and a mass storage device 107 such as a magnetic disk drive or optical disk drive. Mass storage 
device 107 is coupled to bus 101 and is typically used with a computer readable mass storage 
medium 108, such as a magnetic or optical disk, for storage of information and instructions. The 
system may further be coupled to a display device 121, such as a cathode ray tube (CRT) or a 
liquid crystal display (LCD) coupled to bus 101 through bus 103 for displaying information to a 
computer user. An alphanumeric input device 122, including alphanumeric and other keys, may 
also be coupled to bus 101 through bus 103 for communicating information and command 
selections to processor 102. An additional user input device is cursor control 123, such as a 
mouse, a trackball, stylus, or cursor direction keys coupled to bus 101 through bus 103 for 
communicating direction information and command selections to processor 102, and for 
controlling cursor movement on display device 121. Another device which may optionally be 
coupled to bus 101 through bus 103 is a hard copy device 124 which may be used for printing 
instructions, data, or other information on a medium such as paper, film, or similar types of 
media. In the preferred embodiment, a communication device 125 is coupled to bus 101 through 
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Di gital Information Library System 

Figure 2 illustrates the computer network architecture used in the preferred embodiment of 
the present invention. In general, the network architecture of the present invention includes a 
library site 250 coupled to a client site 210 via a conventional distribution network infrastructure 
240. This conventional distribution network infrastructure 240 can be implemented as a standard 
telephone connection provided between the library site 250 and client site 210 through an Internet 
provider to enable data communication on the Internet over a conventional telephone network. 
This use of the Internet as a distribution network is well known to those of ordinary skill in the 
art. In an alternative embodiment having cable modem capability, communication over a 
conventional cable network is possible in lieu of communication over the telephone network. The 
cable network is typically much faster (i.e. provides a much greater bandwidth) than the standard 
telephone network; however, cable modems are typically more expensive than standard POTS 
(plain old telephone system) modems. In another alternative embodiment having conventional 
Integrated Services Digital Network (ISDN) capability, the distribution network 240 is accessed 
using an ISDN modem. Again, the ISDN network is typically faster than the POTS network; 
however, access to an ISDN network is generally more expensive. Cable modems and ISDN 
implementations are alternative communications media to the POTS implementation. 

In addition, it will be apparent to those of ordinary skill in the an that other forms of 
networking may equivalently be supported by the present invention. For example, a wireless 
transmission means such as infrared or radio links may also provide the distribution network 240 
described in the present application. As an alternative to the Internet, a proprietary network/bulletin 
board such as AMERICA-ON-LINE (AOL), or COMPUSERVE may be used. 

Each of the servers at library site 250 and the client computer system 214 at client site 210 
can be implemented as a computer system such as the one described above in connection with 
Figure 1. It will be apparent to one of ordinary skill in the an that the library server 260, authoring 
system 280, and authorization server 270 can be remotely located yet networked together as a 
distributed system using the techniques described above. In addition, the present invention allows 
for multiple library servers, authoring systems and authorization servers. Conversely, the servers 
may be implemented as separate functions of a single machine. These alternative embodiments are 
illustrated in Figures 4-8 and are described in more detail below. 

The mobile playback device 212 is a minimally configured, low-cost, standalone mobile 
unit for receiving and storing digital information files or programs as downloaded by library 
server 260 and client computer system 214 and for playing back the digital information files or 
programs for a user of the mobile playback device 212. The mobile playback device 212 is 
temporarily removably coupled to the client computer system 214 while the download takes place. 
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partitions digital information content into segments, which can be identified, searched, and 
skipped over if desired. All of these functions are performed by authoring system 280. 

Figure 3 illustrates the authoring system 280 of the preferred embodiment. Authoring 
system 280 receives digital information content from a variety of conventional sources as raw 
digitized data. This digital information data is fed to three components of the authoring system 280 
of the preferred embodiment. The digital information compressor 314 receives the raw digital data 
and compresses the digitized data. There are a variety of conventional techniques in existence for 
compressing digital data. These techniques can be optimized depending upon the type of digital 
data being processed. Thus, the present invention provides several compression methods and a 
means for the authoring system operator 305 to select between these methods based upon the 
category of digital information content 310 being input to the digital information compressor 314. 
Alternatively, the selection of compression method may be performed automatically by 
interpretation of the digital information content 310 itself. A compressed digital information file is 
output by digital information compressor 314 to scrambler 318. 

The raw digital information content 310 is also fed to template header generator 312. Each 
digital information file maintained by the library server 260 includes other descriptive information 
used to identify the file s content and to provide information used to process the digital 
information within the file. Each digital information file includes a template header, a descrambling 
map, selected preview clips, and the digital information programming itself. In the preferred 
embodiment, the template header comprises a number of attributes corresponding to the digital 
information in the file. For example, the digital information may be audio information generated 
from the content of a book or other published work. In this example, the audio file template header 
contains attributes including: 1) the title of a book, volume, or medium from which the digital 
information content originated, 2) the legal copyright associated with the digital information 
content, 3) audible title(s) of the content, 4) a table of contents of the content, and 5) playback 
settings for appropriately playing or rendering the digital information. The table of contents 
contains content navigation information including but not limited to: the number of chapters, the 
length of the program, and information indicative of the relevant content sections. The table of 
contents is generated with input from authoring system operator 305 or automatically by analysis 
of digital information content 310. The descrambling map 322 is used to interpret the digital 
information after the digital information has been scrambled by scrambler 318 as described below. 
The preview clips 324 comprise short pre-generated portions of digital information content used to 
give a consumer a sense of the content of a particular digital information file. In the preferred 
embodiment, these previews are generated as conventional formatted files which can be directly 
played by sound generation circuitry 130 or rendered by other means. A digital information file 
can have several preview clips associated with it. The preview clips 324 are not compressed or 
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information content is converted into digital information files using the authoring system 280 in a 
similar manner. 

Library Server 

Referring again to Figure 2, the library server 260 is responsible for maintaining the digital 
information program files 262 created by the authoring system 280. In addition, the library server 
260 receives requests for access to the digital information program files 262 from client computer 
systems 214 over network 240 and manages purchase and delivery of the selected digital 
information files and/or delivery of selected preview clips 324. The library server 260 includes 
library management software 261 for performing these library server functions and a library key 
263 used for the authentication protocol described below. Library management software 261 
includes processing logic for receiving and responding to client computer system 214 requests for 
access and/or purchase of a digital information program file 262. Upon receiving such a client 
request, library server 260 uses authorization server 270 to authenticate the request with client 
information 272 generated and maintained by library server 260 or authorization server 270. The 
client information 272 includes client identifiers which are used to target content for playback on 
individual mobile playback devices 212 or software players 226. Client information 272 may also 
contain client personal information, user content preferences, client billing history, player usage 
history, and player group lists. In an alternative embodiment, portions of client information 272 
may instead be stored in server 260. Using the authorization protocol described in more detail 
below, the library server 260 determines if the client request can be serviced. If approved, the 
library server 260 accesses the digital information program file(s) or preview clip(s) requested by 
the client computer system 214, delivers the selected preview clip(s) or builds encrypted, targeted, 
and digitally signed digital information files using the authentication protocol described in more 
detail below, and transfers the encrypted and compressed digital information file(s) to the 
requesting client computer system 214 via network 240. Distributable mass storage media 241 
may also be used as a delivery medium for the transfer of information to client system 214. The 
client computer system 214 may then independently download the selected digital information files 
(or a subset thereof) into the mobile playback device 212 for subsequent playback. The library 
server 260 also collects usage statistics on the access history of the digital information files 262 
and stores this usage data into usage statistic storage area 264. The library server 260 also stores 
operating code segments (firmware) for the client browser 219, software player 226, and for 
mobile playback device 212. This operating code can be downloaded to the client computer system 
214 in the same manner as digital information files are transferred. Player configuration data for 
playback device 212 and software player 226 is stored on the library server 260 and can be 
customized or updated in the same manner as digital information files and firmware are 
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server 260 over network 240. In an alternate embodiment, distributable mass storage media 241 
is used instead of network 240 to transfer information to client computer system 214. The 
software player 226 is a software module used to emulate the operation of mobile playback device 
212 and for playing digital information files through the sound circuitry 130 and audio output 
device 132 of client computer system 214. Operating code and configuration information for the 
software player 226 can be downloaded or updated from the server 260 in the same manner as the 
mobile playback device 212 can be downloaded or updated. The software player 226 functionality 
is the equivalent of the functionality and operation of the mobile playback device 212. Thus, the 
use of the term "player" throughout this document generally applies to both the mobile playback 
device 212 and software player 226. Software players 226 are assigned unique player IDs and can 
be assigned group IDs that function similarly to IDs assigned to mobile playback devices 212. 

Mobile Playback Device 

The mobile playback device 212 con verts a digital information file into sound or 
displayable imagery which is played through audio output means or displayed on a display device. 
In the preferred embodiment, the mobile playback device 212 is a minimal capability, low-cost 
device primarily dedicated to playing audio files or displaying visual images or text on a display 
device. The mobile playback device 212 is minimally configured to retain its light-weight, low 
cost, and readily mobile features. The preferred embodiment does not therefore include the use of 
a portable personal computer or laptop computer as the mobile playback device 212; because, such 
general purpose computing devices typically do not meet the light-weight and low cost constraints 
of the preferred mobile playback device 212. Such general purpose computing devices typically 
have unnecessary functionality, more complicated interfaces, and may suffer cost and performance 
penalties in comparison to the special purpose mobile playback device 212. In the preferred 
embodiment, the mobile playback device 212 includes a processor, memory, and an interface to 
client computer system 214 over which compressed digital information files 216 are received. As 
described in more detail below, mobile playback device 212 also includes a player ID 223, group 
IDs 225, and server public key 215 used for authenticating digital information and software files 
received from server 260 via client computer system 214. The user controls the mobile playback 
device 212 using buttons and knobs provided on the device. These controls are used to navigate 
through digital information files 216, adjust configuration data and playback parameters, or 
perform other functions as directed by firmware stored in playback device 212. When coupled to 
the player, client computer system 214 or other electronic devices can solicit user input from these 
controls. In an alternative embodiment, a set of additional user controls is provided on a remote 
control unit that is coupled to the player via a wired or wireless connection. Digital information 
output may be provided via a headphone jack, on board speaker, or wireless transmitter to a 
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The software is encrypted, scrambled, and digitally signed in a manner similar to the scrambling 
and delivery of the digital information files. Changes to the ID list, audio prompts, and other 
configuration data for playback device 212 can be downloaded in a manner similar to the 
downloading of software updates from library server 260. 

The preferred embodiment utilizes three authentication processes to protect the transfer of 
information from server 260 to client system 214 and playback device 212. First, a point-to-point 
authentication protocol is performed whereby the library server 260 must verify that the requesting 
client computer system 214 is an authorized client and the client computer system 214 must verify 
that the library server 260 is an authorized provider. Secondly, a targeting protocol is performed 
whereby the library server 260 utilizes a set of identifiers (i.e. player IDs) for mobile playback 
devices 212 authorized to receive the selected download data from library server 260. The mobile 
playback device identifiers are provided by client computer system 214 or are referenced from user 
profiles stored on library server 260. In the targeting process, library server 260 formats and 
downloads data that can only be read by mobile devices 212 with these identifiers. Thirdly, a 
library server digital signature is appended to the downloaded data for use by the mobile playback 
device 212 to verify that the downloaded data was originated by an authorized library server. 
These three authentication processes of the present invention are described in detail in the 
following sections. 

Point-to-Point Authentication Protocol 

The library server 260, client computer system 214, and mobile playback devices 212 each 
have a unique verification sequence which is used to verify the authenticity of another system. In 
communications between library server 260 and client system 214, both systems alternately act to 
(1) request verification of the other system and (2) provide an authenticating response to a 
verification request. Communication between mobile devices 212 and client computer system 214 
use a similar authentication protocol, as well as real-time communication between mobile devices 
212 and library server 260 via client system 214. This verification sequence comprises a pre- 
defined set of bit streams or data structures which are sent by the requesting system (i.e. the 
system requesting verification) to the receiving system being authenticated (i.e. the respondent) in 
a point-to-point transmission. The receiving system must respond to the verification sequence in a 
pre-defined manner by sending particular response bit streams or data structures to the requesting 
system. If the appropriate response data from the respondent is received by the requesting system, 
the system being verified is considered an authorized system. Conversely, the system being 
verified is considered unauthorized if the appropriate response data is not received by the 
requesting system prior to a pre-defined time-out period. Both systems begin communication by 
acting as requesters and respondents in separate verification cycles. Upon completion of these 
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alternative embodiment, the private group ID is not used in the targeting process and is not 
transferred to the player. The group assignment process may be restricted to using real-time 
communications between server 260 and the player via client system 214, or it may take place 
sometime after group assignments have been downloaded to client system 214. Having described 
the player IDs and group CDs defined in the present invention, the use of these IDs in the targeting 
protocol is described next. 

Library server 260 includes a player ID table 266 as shown in Figure 2. Player ID table 
266 includes a storage area for private EDs and public IDs. The private IDs are pre-loaded into 
player table 266 when a new mobile playback device is installed into the system or when a new 
group is established. In another embodiment, ID table 266 is a mathematical function which 
converts group or player public IDs. Public player and group IDs are sent by a client computer 
system 214 to the server 260 when the client computer system 214 desires to target a particular 
player 212/226 or set of mobile playback devices 212 to a particular specified digital information, 
software content, or configuration data selection. Digital information selection is made from the 
files 262 stored on library server 260. Software or configuration data selection is made from files 
stored on server 260 or from data generated upon request by server 260. Software content and 
configuration data is prepared and scrambled in a manner similar to the authoring process for 
digital information content. Once an association is made by client computer system 214 between a 
set of targeted public IDs and the associated data to be transferred from server 260, library server 
260 creates a targeted header for the selected files. The library management software 261 consults 
the public ED to private ED table 266 to locate the corresponding targeted private ID(s). The 
targeted header comprises a combination of the descrambling map 322 from the selected files with 
the private player EDs corresponding to the targeted mobile playback devices 212. The 
descrambling map 322 is thereby encrypted using the secret IDs of the targeted mobile playback 
device(s) 212. This targeted header is linked with the corresponding digital information or 
software content of the selected file in a network transport ready data block. A digital signature is 
applied to the data block as described below in connection with the data signature protocol. 
Transport integrity data (such as the use of checksums or cyclic redundancy check) is applied to 
the data block and the data block is sent to the client computer system 214 via network 240. 
Because the data block can only be unscrambled using the corresponding descrambling block 322 
in its header and because the descrambling block 322 was combined (i.e. encrypted) with a private 
ID known only by the targeted mobile playback device(s) 212, only the targeted mobile playback 
device(s) 212 will be able to unscramble and read the data block. The selected digital information, 
software content, and configuration data is thereby targeted to a particular set of mobile playback 
devices 212. 

For small groups of mobile playback devices 212, each targeted header of a digital 
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server 260. In this embodiment, library server 260 performs signatures on the content. A person 
of ordinary skill in the art would realize that the signatures may also be performed on the digital 
information by authoring system 280. The signatures may also be performed in a multiple step 
process shared by authoring system 280 and library server 260. 

In an alternate embodiment, digital signatures are applied to downloaded material by a 
trusted client computer system 214. In another alternate embodiment, digital signatures are not 
applied to downloaded material and system security rests on the use of targeting and/or point-to- 
point authentication. 



Downloading Digital Information Content. Software Updates, or Configuration Information From 
the Client Computer System to the Mobile Playback Device 

In a first step, the client computer system 214 and the mobile device use the^point-to-point 
authentication protocol described above to verify that an authorized mobile playback device 212 is 
communicating with an authorized client computer system 214. If this is the case, the mobile 
playback device 212 transmits its memory map to the client computer system 214 via the mobile 
device interface 221. A table of contents defining the available digital information files 220 and 
player configuration profiles resident in client computer system 214 is displayed along with the 
mobile playback device 212 memory map for a user of client computer system 214. The user 
selects which files 220 of client computer system 214 should replace portions or segments of 
specified mobile playback device 212 memory as defined by the mobile playback device 212 
memory map. Alternately, client browser 219 can be configured to automatically perform this 
selection process. In either case, the user is prevented from selecting digital information content 
larger than the available memory of playback device 212. In addition, control software and/or 
configuration data for playback device 212 may be automatically updated by client computer 214. 
The specified digital information files 220, associated headers, operating code, or configuration 
data are thereafter downloaded into mobile playback device 212 memory. The mobile playback 
device 212 uses checksums to verify the integrity of the download. The mobile playback device 
212 uses the server public key 215, the header, and the digital signature to authenticate the 
download as described above. The header descrambling map is used by targeted mobile playback 
devices 212 to unscramble the downloaded data. In other embodiments, mobile playback device 
212 may unscramble the downloaded data and/or decompress the downloaded data before 
authenticating the signature. Each segment of the digital information content may be 
independently authenticated and validated using any of the techniques described above. Digital 
information prompts on the mobile playback device 212 guide the user to the desired portion of the 
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This concept can also be used for the authoring and authorization servers 280 and 270, 
respectively. As shown in Figure 6, the authoring system 280 and the authorization server 270 is 
implemented on a single platform 685 as authoring process 680 and authorization process 670. 
These processes perform the same functions as described above, except the implementation 
provides the convenience of a single server and the scalability of multiple processes for the 
authoring and authorization tasks. 

Figure 7 illustrates yet another alternative embodiment wherein the client computer systems 
214 include a local library 710. The local library 710 provides a local storage area and library 
access control functionality which provides access to a subset of the archived digital information 
from library server 260. In the manner described above, the user of a client computer system 214 
identifies the titles or items of digital information in library server 260 that the user wishes to 
access. In the preferred embodiment, these content selections are transferred to a client storage 
area 220 (as shown in Figure 2) for subsequent downloading to mobile playback device 212. The 
embodiment shown in Figure 7 expands upon the client storage area 220 and creates a local library 
710. The local library 710 is used for storage of selected content; but also for searching, sorting, 
categorizing, and abstracting the locally stored content. The local library 710 allows a client 
computer system 214 to maintain a small subset of the full library which may be used to create 
custom collections of content in a variety of user selected configurations. Client systems 214 may 
be permitted to access the contents of local libraries 7 10 on other client systems 214. In a related 
alternate embodiment, library server processes 460 may also reside on selected client systems 214. 
This embodiment allows client systems 214 to browse and purchase content that is scrambled, 
targeted, and delivered from library server process 460 executing on a locally positioned client 
system 214. By maintaining the library locally, a portion of the network access and transfer 
overhead is eliminated. 

Figure 8 illustrates another alternative embodiment of the present invention wherein the 
client computer system 214 is eliminated and the mobile playback device 212 is connected direcdy 
to the network 240 through network interface 810, in the preferred embodiment, the mobile 
playback device 212 is a minimal capability device primarily dedicated to playing audio files or 
displaying visual images or text on a display device. The mobile playback device 212 is minimally 
configured to retain its light-weight, low cost, and readily mobile features. The preferred 
embodiment does not therefore include the use of a portable personal computer or laptop 
computer, because, such devices typically do not meet the light-weight and low cost constraints of 
the preferred mobile playback device 212. However, the minimal mobile playback device 212 may 
be augmented to add network interface 810 which comprises a conventional hardware connector, 
hardware buffers and controllers, and firmware support for a particular conventional network 
protocol. For example, the mobile playback device 212 may be augmented with an integrated 
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storage media 241 or via distribution network 240. A customer operates client browser 219 to 
browse, select, and purchase digital information files that are delivered to the customer's mobile 
playback device 212, Authentication, targeting, and download processes are performed within the 
kiosk by library server process 460 that is connected to remote authorization server 270 over 
network 240. In a related embodiment, figure 7 shows a client system 214 with local library 710 
that can be converted into a kiosk with functionality similar to kiosk 910. In this system, a special 
version of client browser 219 provides the same user functionality as the previous kiosk 
embodiment. 

An alternate embodiment of the system uses a common communication network to connect 
all system components. In Figure 10, network 240 is directly coupled to client system 214 and 
814, network interface(s) 810, library server(s) 260, authorization server 270, and authoring 
system(s) 280. One of ordinary skill in the ait will realize that network 240 can also be segmented 
into a number of independent networks or communication links without changing the functionality 
of the system. 

Thus, a method and apparatus for implementing a computer network based digital 
information library system employing authentication and encryption protocols for the secure 
transfer of digital information library programs, software, and configuration data to a client 
computer system and a mobile digital information playback device removably connectable to the 
client computer system is disclosed. Although the present invention has been described with 
respect to specific examples and subsystems, it will be apparent to those of ordinary skill in the an 
that the invention is not limited to these specific examples or subsystems but extends to other 
embodiments as well. The present invention includes all of these other embodiments as specified 
in the claims that follow. 
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We claim: 

ahbraryserverhavingapluralityofdigitalinformation fiJes; 

a client computer system coupled to said library server over a network- and 

device. gSa,dSeIeCKd0ne0rmoreofsaid *Bi.alin f or m a ti<1I , fll es t o S aid m „bi 1 e 

2. The library and information delivery system a* ri a i m ^ • ™ • . 

authoring system coupled to said library server Z Zer^ 2^1™ " 
information files. generadng or modifying said plurality of digital 

3. The library and information delivery system as claims in r>. , . 

of digital information files includes audio m ! m 1 Whercin said P Iura *y 

system and said plurality of digital information files. ^ C ° mpUter 
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6. The library and information delivery system as claimed in Claim 1 wherein said client 
computer system further includes a player for tangibly playing said selected one or more of said 
digital information files on said client computer system. 



7. The library and information delivery system as claimed in Claim 1 wherein said mobile 
device further includes a means for tangibly playing said selected one or more of said digital 
information files downloaded from said client computer system. 



8. The library and information delivery system as claimed in Claim 1 further including an 
authorization server coupled to said library server for authorizing access to said plurality of digital 
information files by said client computer system. 



9. The library and information delivery system as claimed in Claim 1 wherein said library 
server is a software process running on several computer systems. 



10. The library and information delivery system as claimed in Claim 2 wherein said library 
server and said authoring system run on different computer systems. 



1 1. The library and information delivery system as claimed in Claim 8 wherein said library 
server and said authorization server run on different computer systems. 



12. The library and information delivery system as claimed in Claim 1 further including an 
authoring system coupled to said library server for generating or modifying said plurality of digital 
information files, said library and information delivery system further including an authorization 
server coupled to said library server for authorizing access to said plurality of digital information 
files by said client computer system, said library and information delivery system running on a 
single computer system. 



BN8DOCID: <WO_9ei1407A1JL> 



WO 98/1 1487 

PCT/US97/I6184 



26 

1 3. The library and information delivery system as claimed in Claim 1 further indnH" 

15. The library and information delivery system as claimed in Claim 1 wherein said mow, 
device further includes a network interface fnrH™ wherein said mobile 

aid ofaclient compute 

16. The library and information delivery system as claimed in Claim 1 wherein said l«rir 

17. The library and information delivery system as claimed in Claim 1 wherein said h™, 
^ownlo^dingfurther includes logic for^ 

digital mformanon files downloaded to said mobile device. 

18. The library and information delivery system as claimed in Claim 1 wherein said client 
computer system further includes logic for previewing said digital information n,es p^ to tZ 
downloaded to said mobile device. '"es prior to being 
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19. The library and information delivery system as claimed in Claim I further including 
authentication logic for authenticating access to said library, said authentication logic including a 
means for performing a point-to-point authentication protocol. 



20. The library and information delivery system as claimed in Claim 1 further including 
authentication logic for authenticating access to said library, said authentication logic including a 
means for performing a targeting authentication protocol. 



21. The library and information delivery system as claimed in Claim 1 further including 
authentication logic for authenticating access to said library > said authentication logic including a 
means for performing a digital signature authentication protocol. 



22. In a computer based library and information delivery system, said library and 
information delivery system including a library server having a plurality of digital information 
files, a client computer system coupled to said library server over a network, and a mobile device 
removably connectable to said client computer system, a method for accessing and obtaining 
selected digital information files comprising the steps of: 

requesting a download of a selected one or more of said digital information files from said 
library server; and 

downloading said selected one or more of said digital information files to said mobile 

device. 



23. The method as claimed in Claim 22 further including a step of generating or modifying 
said plurality of digital information files. 



24. The method as claimed in Claim 22 wherein said plurality of digital information files 
includes audio files, spoken audio files, visual image files, text files, video files, multimedia files, 
operating code files, or configuration information files. 



BNSOOCID: <WO_961 1 407 Ai JU> 



WO 98/1 1487 

PCT/US97/16184 



28 

25. The method as claimed in Claim 22 further including a step of activating library 



26. The method as claimed in Claim 22 further including a step of mterfacing with said 
ZT Se,eCd ° nS ° f " m ° re ° f ^ diglt£d in " n files fr ™ -id 



select" ^ meth °t ^ Cl3imed ^ CIaim 22 fUrther inC,Uding a Ste P of »»&*y Playing said 
selected one or more of said digital information Hies on said client computer system 

28 - ^ method as clai ™* » Claim 22 further including a step of tangibly p, aying said 
selected one or more of said digital information fi.es downloaded from said client computer 



29 The method as claimed in Claim 22 further including a step of authorizing access to 
said plurality of digital information files by said client computer system. 



30. The method as claimed in Claim 22 further including the steps of generating or 
rnodxfying said pluralky of digital information files, and authorizing access to said plurality of 
digital information files by said client computer system, said library and information delivery 
system running on a single computer system. 



31. The method as claimed in Claim 22 further including a step of locally storing a selected 
portion of said plurality of digital information files. 
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32. The method as claimed in Claim 22 further including a step of directly communicating 
with a network without the aid of a client computer system. 



33. The method as claimed in Claim 22 further including a step of limiting said download 
based on available memory of said mobile device. 



34. The method as claimed in Claim 22 further including a step of performing 
authentication on each segment of said digital information files downloaded to said mobile device. 



35. The method as claimed in Claim 22 further including a step of previewing said digital 
information files prior to being downloaded to said mobile device. 



36. The method as claimed in Claim 22 further including a step of performing a point-to- 
point authentication protocol. 



37. The method as claimed in Claim 22 further including a step of performing a targeting 
authentication protocol. 



38. The method as claimed in Claim 22 further including a step of performing a digital 
signature authentication protocol. 
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